Episode 43

full
Published on:

1st Jun 2026

Ep43: The Best Personality Traits for Working in Cybersecurity

Episode Summary:

A Reddit thread on r/cybersecurity asked a simple question: what's the best personality trait for working in cyber? The answers — with hundreds of upvotes — weren't about hacking or certifications. They were about curiosity, patience, humility, staying calm under pressure, and empathy. Marc walks through each trait with personal stories from 8+ years of building teams, hiring, and working incidents at 2 AM.

Key Topics Covered:

  • Curiosity — the #1 answer by a wide margin; the trait that makes you dig into a log line everyone else shrugs off
  • Patience — explaining technical risk to non-technical people without making them feel stupid, because if you do, they stop reporting incidents
  • Humility — saying "I don't know, but I'll figure it out" beats bluffing every time; ego is the worst trait in the field
  • Calm under pressure — incident response at 2 AM, zero-days on Friday afternoons, breaches that keep growing; staying focused when everything is on fire matters more than any cert
  • Empathy and kindness — cybersecurity is a people problem wrapped in a technology problem; being technically right doesn't matter if nobody wants to work with you
  • The uncomfortable truth — ADHD, burnout, trauma-induced hypervigilance; the always-on mindset is a strength until it isn't

Main Takeaways:

  • Technical skills are trainable — tools, frameworks, scripting languages, detection logic are all learnable, especially with AI
  • Soft traits like curiosity, patience, and empathy are harder to develop and are what separate people everyone wants on their team from people nobody wants to work with
  • If you're thinking about getting into cybersecurity, don't ask "am I technical enough?" — ask "am I curious enough to keep learning?"
  • The best cybersecurity professionals aren't the ones who sprint the hardest — they're the ones still there in five years

Timestamps:

  • [0:00] Introduction — the Reddit thread that started it all
  • [0:58] Curiosity — the #1 answer and why it matters
  • [2:41] Patience — the art of explaining things without condescension
  • [3:58] Humility — why "I don't know" is a superpower
  • [5:15] Calm under pressure — the difference between a skill and a warning sign
  • [6:28] Empathy and kindness — the most surprising and important trait
  • [7:49] The uncomfortable part — burnout, ADHD, and mental health in cyber
  • [9:11] Final thoughts — what really separates the best from the rest

Tools & Resources Mentioned:

---

I do hope you enjoyed this episode of the podcast. Here are some helpful resources including any sites that were mentioned in this episode.

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

--

If you have questions for the show, feedback or topics you want covered. Please send a short email to [email protected] with the Subject line of "Byte-Sized Security" so I know it's about the podcast.

Connect with me on TikTok: https://www.tiktok.com/@bytesizedsecurity

Next Episode All Episodes Previous Episode

Support Byte Sized Security

A huge thank you to our supporters, it means a lot that you support our podcast.

If you like the podcast and want to support it, too, you can leave us a tip using the button below. We really appreciate it and it only takes a moment!
Support Byte Sized Security
A
We haven’t had any Tips yet :( Maybe you could be the first!

Listen for free

Show artwork for Byte Sized Security

About the Podcast

Byte Sized Security
Snackable advice on cyber security best practices tailored for professionals on the go
In a world where cyberattacks are becoming more commonplace, we all need to be vigilant about protecting our digital lives, whether at home or at work. Byte Sized Security is the podcast that provides snackable advice on cybersecurity best practices tailored for professionals on the go.

Hosted by information security expert, Marc David, each 15-20 minute episode provides actionable guidance to help listeners safeguard their devices, data, and organizations against online threats. With new episodes released every Monday, Byte Sized Security covers topics like social engineering, password management, multi-factor authentication, security awareness training, regulatory compliance, incident response, and more.

Whether you're an IT professional, small business owner, developer, or just someone interested in learning more about cybersecurity, Byte Sized Security is the quick, easy way to pick up useful tips and insights you can immediately put into practice. The clear, jargon-free advice is perfect for listening on your commute, during a lunch break, or working out.

Visit bytesizedsecurity.com to access episodes and show notes with key takeaways and links to useful resources mentioned in each episode. Don't let cybercriminals catch you off guard - get smart, fast with Byte Sized Security! Tune in to boost your cybersecurity knowledge and help secure your part of cyberspace.
Support This Show

About your host

Profile picture for Marc David

Marc David

Marc David is a CISSP-certified Staff Security Engineer with 8+ years in dedicated security roles inside regulated healthcare, and the host of Byte-Sized Security. He describes his work in one line: "I get security tooling adopted by engineering teams who do not report to me." Most security programs fail at adoption, not at tool selection. Marc has driven API security monitoring, device trust, browser-based data loss prevention, and continuous mobile penetration testing to full coverage across engineering, IT, and platform groups where he holds no authority over anyone. His background spans HIPAA, HITRUST, and SOC 2 compliance, security automation, and awareness training built for people who never wanted training. Marc lives in the San Francisco Bay Area and speaks on security adoption, healthcare compliance, and automation.